Latest vulnerabilities for vendor "publishpress"

Where

Sort:

Software

publishpress capabilities

publishpress gutenberg blocks

publishpress post expirator

publishpress publishpress authors

publishpress authors

publishpress future

publishpress publishpress gutenberg blocks

publishpress revisions

publishpress revisions: duplicate posts, submit, approve and schedule content changes

publishpress schedule post changes with publishpress future

PublishPress CapabilitiesWordPress PublishPress Capabilities plugin <= 2.45.0 - Privilege Escalation vulnerability

Risk 66

Severity

7.2

First published (updated )

CVE-2026-28183

PublishPress Schedule Post Changes With PublishPress FutureSchedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories <= 4.10.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'wrapper' Shortcode Attribute

Risk 33

Severity

5.5

First published (updated )

CVE-2026-5247

PublishPress Post ExpiratorWordPress Post Expirator plugin <= 4.9.4 - Cross Site Scripting (XSS) vulnerability

Risk 46

Severity

6.5

First published (updated )

CVE-2026-39482

PublishPress FutureSchedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories <= 4.9.1 - Authenticated (Author+) Missing Authorization to Post/Page Status Modification

Risk 22

Severity

4.3

First published (updated )

CVE-2025-13149

PublishPress Gutenberg BlocksGutenberg Blocks – PublishPress Blocks Controls, Visibility, Reusable Blocks <= 3.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

Risk 39

Severity

6.4

First published (updated )

CVE-2025-8588

PublishPress PublishPress Gutenberg BlocksWordPress Gutenberg Blocks <= 3.3.1 - Local File Inclusion Vulnerability

Risk 69

Severity

7.5

First published (updated )

CVE-2025-48332

PublishPress Gutenberg BlocksWordPress Gutenberg Blocks plugin <= 3.3.1 - Cross Site Scripting (XSS) vulnerability

Risk 46

Severity

6.5

First published (updated )

CVE-2025-49032

PublishPress PublishPress AuthorsWordPress PublishPress Authors plugin <= 4.7.5 - Local File Inclusion Vulnerability

Risk 51

Severity

7.5

EPSS

0.13%

First published (updated )

CVE-2025-47496

PublishPress PublishPress AuthorsWordPress PublishPress Authors plugin <= 4.7.3 - SQL Injection vulnerability

Risk 30

Severity

7.6

EPSS

0.04%

First published (updated )

CVE-2025-26886

PublishPress RevisionsPublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes <= 3.5.15 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure

Risk 22

Severity

4.3

First published (updated )

CVE-2024-11154

PublishPress AuthorsCo-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.7.1 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary User Email Update and Account Takeover

Risk 57

Severity

8.8

EPSS

0.06%

First published (updated )

CVE-2024-9215

PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content ChangesPublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes <= 3.5.14 - Reflected Cross-Site Scripting

Risk 28

Severity

6.1

EPSS

0.05%

First published (updated )

CVE-2024-9436

PublishPress Capabilities WordPressPublishPress Capabilities < 2.5.2 - Admin+ PHP Objection Injection

Risk 66

Severity

7.2

First published (updated )

CVE-2022-3366

PublishPress Capabilities WordPressPublishPress Capabilities < 2.3.1 - Unauthenticated Arbitrary Options Update to Blog Compromise

Risk 86

Severity

9.8

First published (updated )

CVE-2021-25032

PublishPress Post Expirator WordpressPost Expirator < 2.6.0 - Contributor+ Arbitrary Post Schedule Deletion

Risk 38

Severity

6.5

First published (updated )

CVE-2021-24783

Trending

Vendor Risk Score

Software

PublishPress CapabilitiesWordPress PublishPress Capabilities plugin <= 2.45.0 - Privilege Escalation vulnerability

PublishPress Schedule Post Changes With PublishPress FutureSchedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories <= 4.10.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'wrapper' Shortcode Attribute

PublishPress Post ExpiratorWordPress Post Expirator plugin <= 4.9.4 - Cross Site Scripting (XSS) vulnerability

PublishPress FutureSchedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories <= 4.9.1 - Authenticated (Author+) Missing Authorization to Post/Page Status Modification

PublishPress Gutenberg BlocksGutenberg Blocks – PublishPress Blocks Controls, Visibility, Reusable Blocks <= 3.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

Don't miss critical vulnerabilities

PublishPress PublishPress Gutenberg BlocksWordPress Gutenberg Blocks <= 3.3.1 - Local File Inclusion Vulnerability

PublishPress Gutenberg BlocksWordPress Gutenberg Blocks plugin <= 3.3.1 - Cross Site Scripting (XSS) vulnerability

PublishPress PublishPress AuthorsWordPress PublishPress Authors plugin <= 4.7.5 - Local File Inclusion Vulnerability

PublishPress PublishPress AuthorsWordPress PublishPress Authors plugin <= 4.7.3 - SQL Injection vulnerability

PublishPress RevisionsPublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes <= 3.5.15 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure

Don't miss critical vulnerabilities

PublishPress AuthorsCo-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.7.1 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary User Email Update and Account Takeover

PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content ChangesPublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes <= 3.5.14 - Reflected Cross-Site Scripting

PublishPress Capabilities WordPressPublishPress Capabilities < 2.5.2 - Admin+ PHP Objection Injection

PublishPress Capabilities WordPressPublishPress Capabilities < 2.3.1 - Unauthenticated Arbitrary Options Update to Blog Compromise

PublishPress Post Expirator WordpressPost Expirator < 2.6.0 - Contributor+ Arbitrary Post Schedule Deletion

Don't miss critical vulnerabilities

Company

Resources

Contact